Analysis

  • max time kernel
    143s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2023 19:18

General

  • Target

    ef9c1aa805ac555c9f40fc5b1f06bea1bbc704621091917fcbc58ceee5d7f484.exe

  • Size

    9.0MB

  • MD5

    6074519c9b99285af69e78f17c1c3fd0

  • SHA1

    3ebfe3b1c03c106bc16c36301723d076ed748f3a

  • SHA256

    ef9c1aa805ac555c9f40fc5b1f06bea1bbc704621091917fcbc58ceee5d7f484

  • SHA512

    e94fb69017be9c15ae721d8121c5e149ccbb09e73c145a7462eac8f74fd27592980592473735e27e41ccb04c5109a21922b7ae4062059c458e6617d4123f9444

  • SSDEEP

    196608:n0ju8ge3dFmfzGkmkgkVQic/ojlAAwczIVnAbmwGEw:n0j6e/T5O6icDu1Cwi

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef9c1aa805ac555c9f40fc5b1f06bea1bbc704621091917fcbc58ceee5d7f484.exe
    "C:\Users\Admin\AppData\Local\Temp\ef9c1aa805ac555c9f40fc5b1f06bea1bbc704621091917fcbc58ceee5d7f484.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\2915724e9f0dbeddd0185659541b9ed2.ini

    Filesize

    1KB

    MD5

    05ba8caac74e611896fe62307aea65d8

    SHA1

    11272e038ec856277888374d169edb7f5811ad76

    SHA256

    82b929a22ed46e763871aab011b99fc9fef1b1a8d96e192213d5bf6f59c3ea58

    SHA512

    d00bdf6e8ba27a2a3f9118aafe9187ed746fdc3b65fd55cb9ec7c7b73a140457034bf6a5598f5ec9d9080eac792d05603de8ed840673f5fc6128aab11f110f16

  • C:\Users\Admin\AppData\Local\Temp\2915724e9f0dbeddd0185659541b9ed2A.ini

    Filesize

    1KB

    MD5

    356a3c19cf7ec0832fca46a45de75dfe

    SHA1

    e793725042d738694de223eae6533081c38e4c19

    SHA256

    4b86e849e7bf8c26b475bd18a2ff30cec8d2d7ecac650cf3559fee0c44d7941d

    SHA512

    35ae4e6aa22cb4a868305586927b7457c1ebb8f3b97031ae3e4d891864a16ba080ff7634ef1fbaa2fff4fb4873d5ee04db276f8cf3099f511f7cdba9e195ccd3

  • C:\Users\Admin\AppData\Local\Temp\ef9c1aa805ac555c9f40fc5b1f06bea1bbc704621091917fcbc58ceee5d7f484.exepack.tmp

    Filesize

    2KB

    MD5

    8f575956e767e542fdade7e961985404

    SHA1

    f9ddd5f3d4590995c7f6f8a11e4ecb7afb0aee4e

    SHA256

    d18bdfb766977dca9a413019f94f64659f8aa9516d8ea8ddf1593e6abc12b53b

    SHA512

    05831406679e8c98e349b91ca9a35b57c36b44df59fa5c24bca1e4243550c6e25a1f80da827c0731479a7a97f3d6fd6872b519bd450648ead1282757c6607d96

  • memory/2188-343-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-345-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-1-0x00000000003D0000-0x00000000003D3000-memory.dmp

    Filesize

    12KB

  • memory/2188-339-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-340-0x00000000003D0000-0x00000000003D3000-memory.dmp

    Filesize

    12KB

  • memory/2188-341-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-342-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-0-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-344-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-2-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-346-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-347-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-348-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-349-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-350-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-351-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-352-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-353-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB

  • memory/2188-354-0x0000000000400000-0x0000000001D04000-memory.dmp

    Filesize

    25.0MB